This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/OCKZtcIzoUazVhraYe6bR411Z6A.roa File: OCKZtcIzoUazVhraYe6bR411Z6A.roa (raw, json) Hash identifier: Avps0CfgCm8XLEgiLO8DQKloLOZ7sLrF5+aFYZ63Qz4= Subject key identifier: 38:22:99:B5:C2:33:A1:46:B3:56:1A:DA:61:EE:9B:47:8D:75:67:A0 Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019AA0A1E3089ACFE35E79215832E04398B3 Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/OCKZtcIzoUazVhraYe6bR411Z6A.roa Signing time: Thu 20 Nov 2025 09:39:15 +0000 ROA not before: Thu 20 Nov 2025 09:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207067 IP address blocks: 188.241.21.0/24 maxlen: 24 2a00:a607::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a1:e3:08:9a:cf:e3:5e:79:21:58:32:e0:43:98:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Nov 20 09:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=382299b5c233a146b3561ada61ee9b478d7567a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:c7:4a:fc:2f:59:aa:7a:6c:4b:18:fd:f9: 0c:ec:6b:25:4d:88:7c:36:08:7e:09:2f:1b:0b:35: d0:f4:13:9c:7e:eb:4d:b5:1d:7e:7e:52:45:68:29: bb:a0:9c:b7:71:3b:24:eb:0a:74:29:47:ea:19:f4: 66:29:f9:bd:31:0e:65:b5:ba:ee:3e:fd:32:1b:45: 2c:85:81:46:fb:3c:da:38:fb:01:e6:06:65:47:8b: 07:83:fc:14:da:e6:e3:b4:3a:2a:d7:7a:c5:f4:46: 3f:3a:0e:84:5a:29:4d:92:15:b8:ff:4b:75:5a:fd: 92:9d:41:05:fd:44:2f:3f:3f:e2:9e:00:10:ab:fd: fc:a0:ad:9e:26:44:61:b5:ec:21:cc:cf:1a:1a:e7: 3c:b3:51:95:a6:a6:f7:bb:a9:c9:fb:12:91:ba:fa: 26:b6:78:90:c4:24:5c:8d:92:40:be:d6:d4:27:72: e9:0b:f6:20:53:1d:58:6d:d8:0d:7a:b3:72:81:0d: bd:9d:02:dd:3f:eb:dd:9e:5b:60:b7:d8:97:40:19: c3:7c:52:dd:35:b9:7a:c2:ce:c9:23:94:ea:01:a7: db:f1:ca:3c:06:18:69:99:72:9d:bf:8f:23:95:f3: f9:39:d3:bb:b8:b8:fd:40:cd:fc:4b:1d:62:9d:9a: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:99:B5:C2:33:A1:46:B3:56:1A:DA:61:EE:9B:47:8D:75:67:A0 X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/OCKZtcIzoUazVhraYe6bR411Z6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.21.0/24 IPv6: 2a00:a607::/32 Signature Algorithm: sha256WithRSAEncryption c7:58:46:1c:2c:c9:f7:bb:d9:e0:a7:78:4d:c3:3f:f2:f0:e9: 6b:14:58:ec:3e:97:ab:e8:41:83:9f:c9:dc:94:0e:01:8a:2a: 9e:ba:9b:63:a0:4e:ad:0a:4d:45:0b:bb:d8:94:74:0c:f0:5c: a8:52:d0:75:73:86:0b:ff:08:10:43:51:79:f2:ec:43:6f:ef: 06:3a:03:ad:3e:59:f2:6f:ba:0e:ec:e6:1f:c0:dc:19:d7:7b: c0:b1:b3:02:4c:37:a9:11:b0:5d:65:5e:5a:90:ff:0f:d4:cd: 68:28:ac:1c:0d:79:4e:13:fd:c3:68:fe:06:c8:ff:cc:06:d4: ac:9e:b7:81:02:7e:7f:c7:15:2d:8c:60:15:f4:f6:10:0b:88: 7d:50:2e:15:74:e7:d2:4a:af:01:cf:61:1c:1d:f2:30:35:de: c9:2c:78:07:93:b1:3e:fd:41:8b:67:20:c6:ea:90:12:48:a9: 3d:cc:31:8f:11:1a:86:3c:00:7e:40:8d:e1:63:20:02:aa:1f: 19:9d:82:9c:0b:6f:d1:4d:ac:bc:ea:50:92:a2:90:ad:b9:76: d2:21:c0:46:6f:e9:99:d3:32:af:00:82:8d:51:31:35:b9:38: cf:95:e6:3a:98:35:d1:22:72:3c:e6:1a:69:a6:2f:81:fa:57: 23:78:d9:dd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqgoeMIms/jXnkhWDLgQ5izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjUxMTIwMDkzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODIyOTliNWMyMzNhMTQ2YjM1NjFhZGE2MWVlOWI0NzhkNzU2N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89HHSvwvWap6bEsY/fkM7GslTYh8 Ngh+CS8bCzXQ9BOcfutNtR1+flJFaCm7oJy3cTsk6wp0KUfqGfRmKfm9MQ5ltbru Pv0yG0UshYFG+zzaOPsB5gZlR4sHg/wU2ubjtDoq13rF9EY/Og6EWilNkhW4/0t1 Wv2SnUEF/UQvPz/ingAQq/38oK2eJkRhtewhzM8aGuc8s1GVpqb3u6nJ+xKRuvom tniQxCRcjZJAvtbUJ3LpC/YgUx1YbdgNerNygQ29nQLdP+vdnltgt9iXQBnDfFLd Nbl6ws7JI5TqAafb8co8BhhpmXKdv48jlfP5OdO7uLj9QM38Sx1inZp56QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDgimbXCM6FGs1Ya2mHum0eNdWegMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvT0NLWnRjSXpvVWF6VmhyYVllNmJSNDExWjZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvPEVMA0E AgACMAcDBQAqAKYHMA0GCSqGSIb3DQEBCwUAA4IBAQDHWEYcLMn3u9ngp3hNwz/y 8OlrFFjsPper6EGDn8nclA4BiiqeuptjoE6tCk1FC7vYlHQM8FyoUtB1c4YL/wgQ Q1F58uxDb+8GOgOtPlnyb7oO7OYfwNwZ13vAsbMCTDepEbBdZV5akP8P1M1oKKwc DXlOE/3DaP4GyP/MBtSsnreBAn5/xxUtjGAV9PYQC4h9UC4VdOfSSq8Bz2EcHfIw Nd7JLHgHk7E+/UGLZyDG6pASSKk9zDGPERqGPAB+QI3hYyACqh8ZnYKcC2/RTay8 6lCSopCtuXbSIcBGb+mZ0zKvAIKNUTE1uTjPleY6mDXRInI85hpppi+B+lcjeNnd -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:32 2025 by rpki-client